CVE-2026-23918 2

Vulnerability (CVE)

Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE

Apache HTTP Server 2.4.66 carries CVE-2026-23918 (CVSS 8.8), a double-free in mod_http2's stream cleanup path in h2_mplx.c, fixed in version 2.4.67 and credited to Bartlomiej Dmitruk of Striga.ai and Stanislaw Strzalkowski of ISEC.pl. The bug triggers when...

Vulnerabilities & Patching

⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, Web Socket Skimmers and More

Cyber Risks The Hacker News

Attackers have weaponized CVE-2026-6973, an improper input validation flaw in Ivanti Endpoint Manager Mobile (EPMM) that lets authenticated users with administrative privileges run code remotely, and are actively exploiting a zero-day memory corruption...

Vulnerabilities & Patching